Capcom, the publisher behind major franchises like Resident Evil, Street Fighter, and Monster Hunter, has disclosed a significant data breach impacting over 11 million Capcom ID accounts. The unauthorized access, which involves a third party gaining entry to user information, was first detected on October 19th due to suspicious activity.
According to a press release from Capcom, the breach resulted in the exposure of email addresses and system-specific identifiers for 11,774,247 accounts. A smaller subset of these, specifically 43 accounts, also had their date of birth, gender, country/region, and nickname records accessed. The company emphasized that login passwords originally set by customers were not confirmed to be compromised, although passwords were changed without authorization on 196 accounts. These affected passwords have since been reset.
Capcom has assured users that credit card information was not among the compromised data. However, the company issued a warning about potential phishing attacks targeting the exposed email addresses. Users are advised to exercise caution if they receive any suspicious emails or messages that impersonate Capcom or related entities, and to avoid clicking on any URLs or opening attached files.
In response to the incident, Capcom has reported the breach to the Osaka Prefectural Police and Japan’s Personal Information Protection Commission. The company has identified and addressed the attack method involved and is conducting a thorough investigation to implement further measures to prevent future occurrences. Affected customers will be notified directly by Capcom.